$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS138045.roa File: AS138045.roa (raw, json) Hash identifier: iMPIPBGY7SXwQjAlCs9lVWvPQZ5R7u/RyncFIDsd1Ok= Subject key identifier: B5:40:F8:3E:42:C8:DD:86:19:64:1E:7B:F9:F5:64:8A:DB:F5:28:67 Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 5E18B67F6A600B4D7BD1E6D4F22A2217DB8344A7 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS138045.roa Signing time: Tue 10 Jun 2025 04:49:09 +0000 ROA not before: Tue 10 Jun 2025 04:44:09 +0000 ROA not after: Tue 09 Jun 2026 04:49:09 +0000 asID: 138045 IP address blocks: 163.61.77.0/24 maxlen: 24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 11:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:18:b6:7f:6a:60:0b:4d:7b:d1:e6:d4:f2:2a:22:17:db:83:44:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jun 10 04:44:09 2025 GMT Not After : Jun 9 04:49:09 2026 GMT Subject: CN=B540F83E42C8DD8619641E7BF9F5648ADBF52867 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:be:2d:24:67:f2:84:0b:9f:14:e0:f5:d2:52: c8:78:7d:9b:e1:f4:9b:a2:d8:8d:a8:16:2e:90:78: fe:a0:5b:0e:fc:6b:0f:4d:23:9c:6a:74:39:23:0b: 69:fc:6f:96:24:b3:c4:cc:55:f5:04:72:c4:0a:47: 3d:f9:7f:ff:7e:e7:bb:7a:d3:d4:cc:c6:50:7f:64: 0c:ee:65:22:53:31:e8:cc:20:57:61:ef:c8:9b:28: 24:3d:6f:77:70:e4:55:84:c1:c6:5a:70:86:b0:cc: c5:78:10:40:e6:53:e4:33:64:47:7f:16:ae:f9:a6: df:5e:8f:46:82:1e:92:83:6a:2a:5c:33:9e:73:73: 94:9b:cc:8d:c1:04:26:36:f6:52:6a:60:04:cd:24: ba:04:10:be:73:fe:6d:1c:36:46:34:85:87:79:3d: 74:66:a1:ff:7e:b2:d2:a0:e0:17:38:5e:b6:87:e4: 02:bb:ef:64:7a:56:a4:51:ab:60:19:e3:6a:56:8d: 54:c8:74:4f:95:47:e1:56:93:ac:11:2c:59:1a:5f: f2:ee:fb:b9:ac:b4:4c:47:8d:96:62:3f:21:4a:cb: b0:f3:61:3d:16:a2:7b:77:29:dd:4b:75:34:f3:63: bc:52:98:b9:49:0e:3b:c7:20:68:44:67:8a:f5:fa: 46:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:40:F8:3E:42:C8:DD:86:19:64:1E:7B:F9:F5:64:8A:DB:F5:28:67 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS138045.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.61.77.0/24 Signature Algorithm: sha256WithRSAEncryption 44:70:04:f6:97:57:d0:68:fd:fc:82:99:35:7b:67:0e:a3:3c: e4:14:66:9b:b1:ee:ff:bb:25:09:bc:71:82:d5:e5:de:da:47: 7f:44:ba:7c:59:c3:a8:5b:3a:4f:54:0c:ab:76:f3:61:4f:69: 48:0f:d2:bd:eb:bb:c5:87:59:43:73:43:6c:bb:e5:8b:50:5c: 43:b6:b3:cd:b3:4c:66:4b:a8:03:2b:57:ce:10:cb:3f:de:60: 6c:8b:3d:2e:3f:e8:f7:b8:a9:a6:24:e6:4d:5d:4c:89:c1:58: 38:7d:ca:7e:bf:8c:46:ee:c0:0b:17:9b:6c:4f:01:7b:2a:3b: 45:8e:08:b9:c9:a1:57:ab:94:e2:a9:dc:d6:57:5e:11:c8:14: ef:43:d9:54:90:f6:bc:ec:e8:90:b7:3f:c4:8d:ff:4a:e0:a5: f9:05:95:d3:0e:50:50:f0:79:85:78:ed:ab:e1:42:3d:93:70: c5:5e:ed:b6:9c:5c:7d:a1:4a:3c:36:d8:65:40:bb:27:22:79: d5:08:20:e8:bd:a7:0b:1e:a6:64:4f:96:98:7f:6f:d2:55:b8: 3a:d6:70:26:5e:c1:3e:14:83:90:2a:5c:a2:12:44:19:91:61: 04:28:aa:2d:a3:d8:73:52:46:b5:fb:ce:6c:18:58:8f:08:4f: 85:0b:5a:c2 -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUXhi2f2pgC0170ebU8ioiF9uDRKcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDYxMDA0NDQwOVoX DTI2MDYwOTA0NDkwOVowMzExMC8GA1UEAxMoQjU0MEY4M0U0MkM4REQ4NjE5NjQx RTdCRjlGNTY0OEFEQkY1Mjg2NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANW+LSRn8oQLnxTg9dJSyHh9m+H0m6LYjagWLpB4/qBbDvxrD00jnGp0OSML afxvliSzxMxV9QRyxApHPfl//37nu3rT1MzGUH9kDO5lIlMx6MwgV2HvyJsoJD1v d3DkVYTBxlpwhrDMxXgQQOZT5DNkR38Wrvmm316PRoIekoNqKlwznnNzlJvMjcEE Jjb2UmpgBM0kugQQvnP+bRw2RjSFh3k9dGah/36y0qDgFzhetofkArvvZHpWpFGr YBnjalaNVMh0T5VH4VaTrBEsWRpf8u77uay0TEeNlmI/IUrLsPNhPRaie3cp3Ut1 NPNjvFKYuUkOO8cgaERnivX6RmECAwEAAaOCAdAwggHMMB0GA1UdDgQWBBS1QPg+ QsjdhhlkHnv59WSK2/UoZzAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3 azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3 RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzEzODA0NS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAKM9TTANBgkqhkiG9w0BAQsFAAOCAQEARHAE9pdX0Gj9/IKZNXtn DqM85BRmm7Hu/7slCbxxgtXl3tpHf0S6fFnDqFs6T1QMq3bzYU9pSA/Sveu7xYdZ Q3NDbLvli1BcQ7azzbNMZkuoAytXzhDLP95gbIs9Lj/o97ippiTmTV1MicFYOH3K fr+MRu7ACxebbE8Beyo7RY4IucmhV6uU4qnc1ldeEcgU70PZVJD2vOzokLc/xI3/ SuCl+QWV0w5QUPB5hXjtq+FCPZNwxV7ttpxcfaFKPDbYZUC7JyJ51Qgg6L2nCx6m ZE+WmH9v0lW4OtZwJl7BPhSDkCpcohJEGZFhBCiqLaPYc1JGtfvObBhYjwhPhQta wg== -----END CERTIFICATE-----Generated at Sun Jun 15 13:25:47 2025 by rpki-client